Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0EIxBKCexUVLU09UT1ehmLPWTgc.roa
File: 0EIxBKCexUVLU09UT1ehmLPWTgc.roa (raw, json)
Hash identifier: 3PL9eN6q3RVhzzO1IBpVNlnmf7goD02OzV/gV/uW8DY=
Subject key identifier: D0:42:31:04:A0:9E:C5:45:4B:53:4F:54:4F:57:A1:98:B3:D6:4E:07
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018FBE67C56CA8BDCFFF4877F4FC91CA0D21
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0EIxBKCexUVLU09UT1ehmLPWTgc.roa
Signing time: Tue 28 May 2024 08:53:42 +0000
ROA not before: Tue 28 May 2024 08:53:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215052
IP address blocks: 194.103.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:67:c5:6c:a8:bd:cf:ff:48:77:f4:fc:91:ca:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 28 08:53:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0423104a09ec5454b534f544f57a198b3d64e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:e0:f9:08:0c:38:3a:2a:d6:b9:dd:25:ac:
e2:5b:6a:89:78:41:d0:d4:21:7a:50:59:20:e4:e0:
f1:be:5a:96:2d:89:aa:5c:a5:bf:e6:9f:77:44:d0:
fa:f0:3d:04:63:28:93:13:3a:7a:9e:84:b2:3c:80:
21:1d:d8:60:f4:cf:3a:27:fe:2f:55:83:76:e1:b5:
95:87:9e:b2:42:55:d5:5e:4d:0d:4d:7d:26:98:92:
d9:f6:c0:e9:82:38:a3:bc:5a:7e:0e:b1:eb:cc:f4:
1a:ff:a2:94:fe:62:b8:89:db:80:51:47:5c:4b:1e:
2e:0f:8a:bd:16:4f:5c:d1:c0:97:a3:9c:69:ab:57:
da:77:7c:a4:7f:84:bf:c4:59:99:de:44:96:62:5a:
66:f6:d3:5e:a3:cc:cf:63:a2:3d:de:e8:1d:a8:3b:
eb:00:d0:43:d7:3b:ad:d1:13:72:41:3e:4b:a9:c9:
1e:22:f2:ab:f5:09:d5:2a:ad:06:7e:b1:25:f6:e7:
24:7b:28:c8:49:98:5f:d3:ee:02:0c:e5:d0:03:d3:
b3:65:ab:14:82:5d:2d:68:10:ff:0c:b2:80:c3:03:
2d:9b:17:75:39:4e:ab:b2:c8:8f:62:38:c1:80:14:
b0:c1:64:52:76:b9:c1:16:7b:fe:64:64:8c:76:d5:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:42:31:04:A0:9E:C5:45:4B:53:4F:54:4F:57:A1:98:B3:D6:4E:07
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0EIxBKCexUVLU09UT1ehmLPWTgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.19.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e1:4f:f3:07:51:08:1e:e6:39:c8:13:e6:4f:60:2e:56:fe:
5e:a6:f6:1e:2e:f5:11:dc:cd:24:52:1d:f0:76:39:f0:a6:5a:
68:cb:a1:ef:6a:40:44:2b:2b:f2:78:cc:23:92:8c:35:26:2b:
0f:ae:52:93:f2:61:9a:fc:95:d1:54:d3:b9:82:15:e3:0a:c5:
79:24:f4:4e:6c:e7:f1:30:37:15:12:9a:60:04:24:91:2d:f6:
e4:cc:58:ba:02:95:2f:ee:b1:2f:c8:c7:ae:33:f0:58:ac:63:
46:fa:a9:66:e2:6a:66:f8:a4:98:f9:92:ab:bb:30:ff:a9:21:
c5:b1:9a:20:bc:2c:e2:40:70:78:12:97:1f:20:16:7a:6f:ea:
53:65:a5:d8:ec:08:33:f7:15:38:04:33:c3:c3:b6:9f:46:51:
75:e3:dc:23:2f:02:90:31:0d:9e:00:cf:50:94:81:97:1b:65:
43:16:3f:d5:6c:ae:2f:a2:fa:03:0f:35:e8:66:c7:4b:9a:58:
5b:d4:8b:b8:05:b3:df:56:ed:4a:79:b6:ec:89:f6:7d:77:24:
cc:41:8c:d7:c7:33:d8:7e:d2:a1:da:c9:09:18:6e:4e:d7:5e:
4b:df:15:2d:0e:ce:01:94:81:83:5d:a6:19:39:03:b9:f9:54:
b0:93:2d:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY++Z8VsqL3P/0h39PyRyg0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwNTI4MDg1MzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDQyMzEwNGEwOWVjNTQ1NGI1MzRmNTQ0ZjU3YTE5OGIzZDY0ZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iPg+QgMODoq1rndJaziW2qJeEHQ
1CF6UFkg5ODxvlqWLYmqXKW/5p93RND68D0EYyiTEzp6noSyPIAhHdhg9M86J/4v
VYN24bWVh56yQlXVXk0NTX0mmJLZ9sDpgjijvFp+DrHrzPQa/6KU/mK4iduAUUdc
Sx4uD4q9Fk9c0cCXo5xpq1fad3ykf4S/xFmZ3kSWYlpm9tNeo8zPY6I93ugdqDvr
ANBD1zut0RNyQT5LqckeIvKr9QnVKq0GfrEl9uckeyjISZhf0+4CDOXQA9OzZasU
gl0taBD/DLKAwwMtmxd1OU6rssiPYjjBgBSwwWRSdrnBFnv+ZGSMdtVvlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNBCMQSgnsVFS1NPVE9XoZiz1k4HMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvMEVJeEJLQ2V4VVZMVTA5VVQxZWhtTFBXVGdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmcTMA0G
CSqGSIb3DQEBCwUAA4IBAQAH4U/zB1EIHuY5yBPmT2AuVv5epvYeLvUR3M0kUh3w
djnwplpoy6HvakBEKyvyeMwjkow1JisPrlKT8mGa/JXRVNO5ghXjCsV5JPRObOfx
MDcVEppgBCSRLfbkzFi6ApUv7rEvyMeuM/BYrGNG+qlm4mpm+KSY+ZKruzD/qSHF
sZogvCziQHB4EpcfIBZ6b+pTZaXY7Agz9xU4BDPDw7afRlF149wjLwKQMQ2eAM9Q
lIGXG2VDFj/VbK4vovoDDzXoZsdLmlhb1Iu4BbPfVu1KebbsifZ9dyTMQYzXxzPY
ftKh2skJGG5O115L3xUtDs4BlIGDXaYZOQO5+VSwky1N
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:15 2025 by rpki-client